UNC3886

UNC3886 is a China-nexus cyberespionage group that has been active since at least 2022, targeting defense, technology, and telecommunication organizations in the United States and the Asia-Pacific-Japan regions. The group demonstrates expertise in edge devices and virtualization technologies, leveraging zero-day vulnerabilities and employing novel malware families and utilities in its operations.